Last updated: October 31, 2026
The controller for this website (cx.tools) is Mussie Haile, Lohmühlenstraße 65, 12435 Berlin, Germany. You can reach us at contact@cx.tools. Full details are in our site notice.
The GDPR and German law (BDSG, TDDDG) apply to this processing.
This website is hosted by Vercel (Vercel Inc., USA). When you visit the site, Vercel processes technical data such as your IP address and request details to deliver it securely. Legal basis: our legitimate interest in a secure and reliable website (Art. 6 (1)(f) GDPR). Transfers to the USA are based on the EU Standard Contractual Clauses (Art. 46 (2)(c) GDPR).
Our catalogue, vendor accounts and click statistics are stored in a database at Supabase, in the EU (Frankfurt, Germany). Supabase Pte. Ltd. (Singapore) is our processor, with support and operations from Supabase, Inc. (USA). Any transfer to Singapore or the USA is based on the EU Standard Contractual Clauses (Art. 46 (2)(c) GDPR).
We use Usercentrics (Usercentrics GmbH, Munich, Germany) as our processor to obtain and manage your choices. It stores your choice in your browser. Its servers receive your IP address when the banner loads, and your choice, a random ID and a timestamp when you decide, so we can prove what you chose.
Storing or reading non-essential information on your device requires your consent (§ 25 (1) TDDDG, Art. 6 (1)(a) GDPR). You can change or withdraw your consent at any time, with effect for the future, through the privacy button on the page. Storing your choice itself is strictly necessary (§ 25 (2) TDDDG) and documents your consent (Art. 7 (1), Art. 6 (1)(c) GDPR).
Google Analytics and PostHog load only if you accept. They help us understand how the directory is used.
Google Analytics (Google Ireland Limited, our processor, with Google LLC, USA) sets the cookies _ga and _ga_1HCQDS4VJJ, which last up to 2 years, and receives your IP address, device and browser information, and the pages and events you use. Google says it does not store the IP address.
PostHog (PostHog, Inc., USA, using its EU cloud), our processor, receives your IP address, device and browser information, and the pages and events you use. We configure it to set no cookies.
If you accept, we also record which tool pages you open in our database. Legal basis for all of this: your consent (Art. 6 (1)(a) GDPR, § 25 (1) TDDDG), which you can withdraw at any time. Transfers to the USA are based on the EU Standard Contractual Clauses, and for Google also on the EU-U.S. Data Privacy Framework.
When you click through to a vendor's website, our server records the tool, the time and the page you came from, to produce statistics for vendors and improve the directory. We do not store your IP address in these records. Legal basis: our legitimate interest in running the directory (Art. 6 (1)(f) GDPR).
If you use the contact form, we use what you enter (company details, goals, budget, timeline, tools, name, work email and phone number) to answer you. Legal basis: your consent (Art. 6 (1)(a) GDPR), which you can withdraw by emailing us. You do not have to give us this data, but we cannot answer without a way to reach you.
The form reaches us through Formspree (Formspree, Inc., USA), so what you enter is processed on its servers in the USA. Details: Formspree's privacy policy. If you would rather not use Formspree, email us directly at contact@cx.tools.
If you email us, we use your address and message to reply. Our email runs on Google Workspace, provided by Google as our processor. Transfers to the USA are based on the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses. Legal basis: our legitimate interest in answering you (Art. 6 (1)(f) GDPR), or steps before a contract if you ask about a paid offer (Art. 6 (1)(b) GDPR).
If you manage a listing, we process your name, email address, password (stored in hashed form) and listing details to provide the account. Legal basis: performance of a contract (Art. 6 (1)(b) GDPR).
Our CX Concierge finds tools with keyword search in your browser. Please do not enter personal information.
Our fonts are hosted with this website, so no connection to Google Fonts is made.
You have the right to access, rectification, erasure, restriction of processing, and data portability. Where processing is based on consent, you can withdraw it at any time with effect for the future.
To exercise these rights, contact us at contact@cx.tools. You also have the right to lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
Where we process your data based on legitimate interests (Art. 6 (1)(f) GDPR), you can object at any time for reasons arising from your particular situation (Art. 21 (1) GDPR). You can object to direct marketing at any time, without giving a reason (Art. 21 (2) GDPR). To object, email contact@cx.tools.